ci: pypi publish only on tag pushes

Author: thomasisensee

.github/workflows/release.yml

@@ -11,7 +11,6 @@ on:
         options:
           - dry-run
           - testpypi
-          - pypi
   push:
     tags:
       - "v*"
@@ -33,7 +32,7 @@ jobs:
           python-version: "3.14"
 
       - name: Verify release tag matches package version
-        if: ${{ github.event_name == 'push' || inputs.publish_target != 'dry-run' }}
+        if: ${{ github.event_name == 'push' || inputs.publish_target == 'testpypi' }}
         run: |
           python - <<'PY'
           import os
@@ -106,7 +105,7 @@ jobs:
 
   publish-pypi:
     name: Publish to PyPI
-    if: ${{ github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && inputs.publish_target == 'pypi') }}
+    if: ${{ github.event_name == 'push' }}
     needs: build
     runs-on: ubuntu-latest
     permissions: